Privacy Policy

Escape the Cubes (Android package com.dev.escapethecubes; iPhone and iPad app on the App Store) · Last updated: November 13, 2026

This policy explains, in detail, what information the game Escape the Cubes ("the game", "we") collects, why it is collected, where it is stored, who it is shared with, how long it is kept, and how you can access or delete it. The game is developed by an independent developer identified as Dev, based in Brazil. Contact: peixotorhakny@gmail.com.

Summary What we collect Stored on your device Google Play features Ads Permissions How we use it Sharing Storage & security Retention Delete your account Your rights Children

1. Summary

You can play without an account (guest mode). In guest mode your progress stays only on your device; the game only sends a few anonymous usage events linked to a random code (section 2.4).
If you create an account, we store a player name you choose and your game progress. You sign in either with a password (stored only as a one-way bcrypt hash) or with Google Play Games, in which case we store only your Play Games player ID.
If you choose to send us feedback in the game, we store the message you write (section 2.5).
Optionally, you can add a recovery e-mail to your account, used only to send you a code if you forget your password.
We do not ask for your phone number, real name, address, contacts, photos, files, microphone, camera or precise location.
The game is free to play. On Android it has optional in-app purchases made through Google Play (cosmetic items and a supporter pack; nothing sold makes you stronger); the iPhone and iPad version has no purchases. We keep a record of which purchases belong to your account (section 2.6). It also shows optional rewarded ads through Google AdMob, which may collect device identifiers.
Your player name, scores and ranking position are public to other players. Names with swear words or insults are refused, and we ask players not to use their real name.
The game is made for players of all ages, including children. On first launch it asks for the year of birth (it is kept only on the device). Players under 13, or whose age is unknown, only receive child-appropriate, non-personalized ads, without the advertising ID (section 13).
You can delete your account at any time inside the game (Settings → Account → Delete account).
We do not sell or rent your data.

2. Information we collect

2.1 Account information (only if you create an account)

Data	Details	Purpose
Player name	A unique name you choose (no spaces; capital letters are kept as you type them). Shown publicly in rankings. Names with swear words or insults are refused, and the game asks players not to use their real name. We may change or remove a name that breaks the Terms of Service.	Identify your account and show you in the rankings.
Password (if you use one)	Never stored in readable form. We keep only a bcrypt hash generated in our database; nobody, including the developer, can read your password. Accounts created with Google Play Games have no password.	Let you log in on other devices.
Google Play Games player ID (if you sign in with Google Play Games)	An identifier that Google Play Games assigns to you for this game. We do not receive your e-mail, your Google account name or your contacts. See section 4.1.	Let you sign in on any device without a password, and link your account to Google Play Games.
Session token	A random identifier (UUID) linked to your account. It does not contain personal information.	Keep you logged in and authorize your requests.
Recovery e-mail (optional)	Only if you add it in Settings. It is confirmed with a 6-digit code sent to it. Codes are stored only as a one-way hash, expire after 15 minutes and are deleted once used. We also keep a log of the codes sent (e-mail address and time) for 2 days, to limit abuse. You can change or remove the e-mail at any time in Settings.	Send you a code to set a new password if you forget it. We never use it for marketing or newsletters.
Login security data	Number of failed login attempts and, if too many happen, the time until which login is temporarily blocked.	Protect your account against password guessing.
Account creation date	Date and time the account was created.	Account management.

2.2 Game progress and statistics (linked to your account)

Data	Details	Purpose
Inventory and currency	Coins, fragments, revive kits, unlocked balls, cube styles and outfits, selected items, upgrades and abilities.	Save your progress and sync it between devices.
Records	Best score (overall and per map), level reached, survival time, number of cubes defeated, bosses defeated, and when the record was set.	Show your records, unlock maps and calculate rankings.
Rankings	For each ranked match: player name, points, level, time, cubes defeated and date. Weekly rankings store the same fields per week.	Global and weekly leaderboards and weekly rewards.
Daily rewards, missions, chests and achievements	Last day the daily reward was collected and streak day; daily missions (type, target, progress, reward, whether claimed); chests (type, origin, unlock time); achievements unlocked.	Run the game's reward systems.
Gameplay statistics	Totals such as matches played, lights collected, cubes defeated, powers used, highest level, longest time, daily rewards and missions completed.	Missions, achievements and game balancing.
Activity log	Records of in-game actions with their date and time: end of a match (map, points, level, time, coins earned, powers used), items unlocked with in-game coins (item, level, price), chests opened and their contents, daily rewards, missions, achievements, rewards obtained by watching an ad, and when an account was linked to Google Play Games.	Validate progress, prevent cheating, fix bugs and balance the game economy.

2.3 Technical information

When the game communicates with our servers, your device's IP address and basic request information (date, time, requested function) are necessarily processed by our hosting provider to deliver the response. We do not use the IP address to identify you, and we do not collect device model, advertising ID, contacts or location ourselves.

2.4 Anonymous usage events (guest mode)

When you play without an account, the game creates a random code on your device the first time you open it. This code is not your advertising ID, is not derived from any device identifier and is not linked to your name or to any account. With this code, the game sends a few events to our server:

the game was opened (with the device language);
the tutorial was completed or skipped (and at which step);
a match ended (points, time, level and how many matches were played);
an account was created (how many guest coins and matches were carried over).

We use these events only to understand how new players use the game (for example, whether the tutorial is clear) and to improve it. Because the code is random and not linked to you, we cannot identify who sent an event.

2.5 Messages you send (Send feedback)

In Settings → Support the game → Send feedback, you can write a message to us. If you do, we store: the text you write (up to 600 characters), the random code described in 2.4, your player name if you are logged in, the game language and the app version. We use it only to read your feedback and improve the game. Please do not include personal information (such as your e-mail or phone number) in the message.

2.6 Purchases (only if you buy something)

Payments are made and processed entirely by Google Play; we never see or store your card, bank or payment details, nor your Google account name or e-mail. For each purchase we store: the product bought, the purchase code and order ID that Google Play issues, the date, whether it was a test purchase, and whether it was later refunded, all linked to your game account. Purchases are not available in guest mode; they require an account so that the items are kept for you. Purchase information is used to deliver what you bought, to restore it on other devices, to prevent duplicate or fraudulent deliveries and to reverse items when Google Play refunds a purchase.

3. Information stored only on your device

The game saves some data in the app's private local storage on your phone or tablet, which is not accessible to other apps:

Your session token and a copy of your profile, so the game opens quickly and works offline.
In guest mode, your whole progress. It is not sent to our servers unless you create an account; only the anonymous events in section 2.4 are sent.
Your settings: music and sound-effect volume, sound on/off, graphics quality, screen shake and vibration.
The year of birth entered on the first-launch screen, and your ad choices (section 5). They are used only on the device to choose how ads are requested and are never sent to our servers.
Small markers such as whether you completed the tutorial, which tips you have already seen, and how many matches you played (used to decide when to show the rating prompt, see section 4.2).

Uninstalling the app or clearing its data removes this local information.

4. Google Play features

This section applies to the Android version. On iPhone and iPad there is no Google Play Games sign-in and there are no in-app purchases: you sign in with your player name and password, and the game is distributed by Apple's App Store under the Apple Privacy Policy.

4.1 Sign-in with Google Play Games (optional)

On Android, you can sign in with Google Play Games. Google Play Games may sign you in automatically when the game opens, according to your Google Play Games settings. When you use it, the game asks Google for a one-time code, which our server exchanges with Google to confirm your Play Games player ID. We store only that player ID, linked to your account. We do not receive your e-mail address, your Google account name, your contacts or your password. Google processes this sign-in under the Google Privacy Policy. You can stop using it at any time in your Google Play Games settings; deleting your game account also removes the link.

4.2 Rating the game

After good moments in the game (for example, a new record), the game may show Google Play's official in-app review window, at most once every 30 days. The "Rate the game" button in Settings opens the game's page on Google Play. Your rating and review are handled by Google Play; we do not receive them through the game, and we see only what Google Play shows publicly on the game's page.

4.3 In-app purchases (Google Play Billing)

When you buy a pack, Google Play shows its own purchase screen and charges you according to your Google Play payment settings. Our server then asks Google Play to confirm the purchase and delivers the items. Refunds are handled by Google Play according to its policies; when Google informs us of a refund, the related items are removed from your account. See Google's Privacy Policy and the Google Play Terms of Service.

4.4 Sharing

The "Share" and "Challenge friends" buttons open your device's share menu with a short text and a link to the game. You choose the app and the people to share with. We do not receive any information about who you share with.

5. Advertising (Google AdMob)

The game offers optional rewarded ads: you choose to watch an ad to revive, double coins, double the daily reward, receive extra coins in the shop, open a chest immediately or receive an extra chest. Ads are provided by Google AdMob (Google LLC). Players who own the Supporter pack receive these rewards without watching the ads, and no ad is shown to them in those cases.

When the ad service is used, Google may collect and process information such as your device's advertising ID, IP address, device and app information, and interactions with the ads, in order to show ads, measure their performance, limit how often you see them and prevent fraud. This processing is done by Google under its own policies:

Children and age screen. On first launch the game shows a neutral screen asking for the year of birth. For players under 13, or whose age is unknown, every ad request is tagged for child-directed treatment (COPPA) and as under the age of consent, the maximum ad content rating is G, ads are not personalized and the advertising ID is not sent; no consent form is shown to them. Only Google AdMob is used, which takes part in Google Play's Families Self-Certified Ads SDK Program.

Your choice. Where the law requires it (for example in the EU and UK), Google's consent form is shown so you can accept or refuse personalized ads. In other countries, the first-launch screen and Settings → Ad privacy offer a "Don't personalize" option, after which only non-personalized ads are requested. Ads are always optional: you can play the whole game without watching any.

You can reset or delete your advertising ID, or opt out of personalized ads, in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on your device). On iPhone and iPad the game does not ask for permission to track you (App Tracking Transparency), so Apple's advertising identifier (IDFA) is not available to the ads. We only receive from AdMob whether an ad was completed, so we can give you the reward; we do not receive your advertising ID.

6. Device permissions

Permission	Why
Internet	Accounts, sign-in, rankings, saving progress, feedback and ads.
Notifications	Optional local reminders, for example when a chest has finished opening or the daily reward is available. Notifications are scheduled on your device and send no data to us. You can refuse or turn them off at any time in your device settings.
Vibration	Haptic feedback during gameplay. Runs only on the device and can be turned off in the game's Settings.

7. How we use the information

To create and maintain your account and let you log in on other devices, with a password or with Google Play Games.
If you added a recovery e-mail, to send you the codes that confirm it and that let you set a new password. Nothing else is sent to it.
To save, restore and synchronize your progress.
To display global and weekly rankings and deliver weekly rewards.
To run daily rewards, missions, chests, achievements and the in-game shop (in-game coins), and to deliver, restore and, when refunded by Google Play, reverse purchases.
To deliver rewards for optional ads.
To understand how new players use the game, read your feedback, and improve the game.
To protect accounts, prevent cheating and abuse, fix errors and balance the game.

Legal bases (Brazil's LGPD / EU GDPR, where applicable): performance of the service you requested (account, sign-in, progress, rankings), our legitimate interest in security, anti-cheat, understanding anonymous usage and improving the game, your choice to send feedback, and, for advertising, the choices you make in your device settings and in the ad service.

Other players: your player name, scores, level, time and ranking positions are visible in the rankings.
Neon (Neon Inc.), which hosts the game's database on servers in São Paulo, Brazil (AWS region sa-east-1), and the small server functions that confirm Google Play Games sign-ins and Google Play purchases, which run in the United States (AWS region us-east-1). Those functions only pass the one-time sign-in code or the purchase code to Google and the confirmed result to our database; they do not store them. Neon processes this data on our behalf.
Resend (Resend, Inc., United States), our e-mail delivery provider: when you ask for a code, a small server function (Neon, United States) gives your recovery e-mail, your player name and the code to Resend, which sends the message from no-reply@araujocorp.com on our behalf. See the Resend Privacy Policy.
Google: Google Play Games (sign-in, section 4.1), Google Play (distribution of the app, in-app review, purchases, section 4.3), and AdMob (section 5, on Android, iPhone and iPad).
Apple: distribution of the iPhone and iPad app through the App Store.
Authorities, only when required by law.

We do not sell, rent or trade your information, and we do not share it with data brokers.

9. Storage, transfers and security

All communication between the game and our servers is encrypted in transit (HTTPS/TLS).
Passwords are stored only as bcrypt hashes.
Google Play Games sign-ins are confirmed with Google on our server before any account is accessed, using a secret key that never leaves the server.
Access to the database is restricted to the developer. Game functions only allow each player to change their own progress, using their session token, and the sign-in and purchase functions use database users that can only run those specific operations.
Repeated failed logins (and failed account-deletion confirmations) temporarily block the account to prevent password guessing.
Our database is stored in Brazil. The sign-in and purchase functions run in the United States, and Google may process data in other countries, under their own safeguards.

No system is 100% secure, but we take reasonable measures to protect your information.

10. How long we keep data

Account, progress, statistics, activity log, ranking entries, the recovery e-mail and the Google Play Games link are kept while your account exists.
When you delete your account, this data is permanently deleted, your name is removed from the rankings, and feedback messages sent with your player name are deleted too.
Purchase records (section 2.6) are kept while your account exists. If you delete your account, the purchase record is kept without any link to you (it no longer identifies you) for up to 5 years, only for accounting, tax and refund-fraud purposes, and then deleted.
Anonymous usage events (section 2.4) and feedback messages (section 2.5) are automatically deleted after 12 months.
Data stored only on your device remains until you uninstall the app or clear its data.

11. How to delete your account and data

You can delete your Escape the Cubes account and all data linked to it in two ways.

Option 1: inside the game (immediate)

Open the game and log in to the account you want to delete.
On the main menu, tap Settings.
In the Account section, tap Delete account.
If your account has a password, enter it. Accounts created with Google Play Games don't need a password.
Tap Delete account again to confirm.

The deletion happens immediately: your account, player name, recovery e-mail, Google Play Games link, coins, fragments, items, upgrades, chests, missions, achievements, statistics, activity log, feedback messages sent with your name, and all your entries in the global and weekly rankings are permanently erased from our servers, and the game logs you out. The data stored on your device is also cleared.

Option 2: by e-mail (if you can no longer open the game or forgot your password)

Send an e-mail to peixotorhakny@gmail.com with the subject "Escape the Cubes - Delete my account".
Include your player name. To confirm you own the account, we may ask you a detail of your profile.
We will delete the same data listed above and reply confirming the deletion.

We do not keep any copy of the deleted data, except the unlinked purchase records described in section 10 and where retention is required by law. You may also ask us by e-mail to delete only part of your data (for example, your ranking entries) while keeping the account. Deleting the account cannot be undone. Guest progress exists only on your device and is removed by uninstalling the app or clearing its data; anonymous usage events cannot be linked to you and are deleted automatically after 12 months.

12. Your rights

Depending on where you live (for example under Brazil's LGPD or the EU/UK GDPR), you may have the right to confirm whether we process your data, access it, correct it, receive a copy (portability), request its deletion, object to or restrict processing, and withdraw consent. To exercise any of these rights, contact peixotorhakny@gmail.com. You also have the right to complain to your data protection authority (in Brazil, the ANPD).

13. Children

Escape the Cubes is designed for players of all ages, including children, and follows Google Play's Families Policy. We take these measures:

No account is needed to play. Guest mode keeps progress only on the device.
If a child creates an account, the only information is a player name (we ask not to use a real name, and names with swear words or insults are refused) and a password or Google Play Games link, plus a recovery e-mail only if one is added. We never ask for phone, real name, photos or location.
The game has no chat and no way to send messages to other players. The only thing other players see is the player name and scores in the rankings.
Ads for children are child-appropriate (rating G), not personalized, and do not use the advertising ID (section 5).
Purchases go through Google Play, where parents can require approval for every purchase (Google Family Link / purchase authentication settings). Nothing that can be bought makes a player stronger.

Parents or guardians can ask us to see or delete their child's data at any time by writing to peixotorhakny@gmail.com, and can delete the account directly in the game (section 11).

14. Changes to this policy

If this policy changes, the new version will be published on this page with a new "Last updated" date. Significant changes may also be announced in the game.

15. Contact

Developer: Dev · E-mail: peixotorhakny@gmail.com